dependabot-npm_and_yarn 0.180.0 → 0.180.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0b573607a9a1e0d1dc4b26fac852a8be73d86d83265beb999e9172ff6153e158
-  data.tar.gz: e80a3e36249068d8356a436a12a5684a754ee968394ad314502eb9fc38e7ff9a
+  metadata.gz: 846bcbbca74a943d3f6eeed52cadbff43879b00ea0c5a0be12366cc632494114
+  data.tar.gz: 1262dc8428431791a3140ea89ad5f71331172b2972f3546cb30837960de8079c
 SHA512:
-  metadata.gz: ec12c9d30028a3e89389471c17302c14fd10af7e49bd44d1f28f2a9360a648e77450d9211e10fd9bd0febe6f17cfe3268bd23ec7682d4e16596f1dd994d02e44
-  data.tar.gz: 3d45cfd273fd14404a139e3fb4c55cc34cb89b77ee3d5e86106b0a6cdfa1a97eb2eacd21279e37ff7b49d4520b04ec4bb3633adcc13c024db0b775a20941dfe2
+  metadata.gz: 7c59fc59ce38b98d7abef337a2b1b579cef676e29f021dd0640fedb75d2cab17ced88933a5f5100a40da0dfaa7d52d71f96634d2966c8525d587609271c2467d
+  data.tar.gz: eb7adf7e61ae3cfa7864f6a772788d7dee1fa2612558380a23132e03c69b660a5989a70323cd4cfd13ca62938d4d85cf5c542b938fc0a7e5c25ce1a1083f34cd

data/helpers/package-lock.json

@@ -19,7 +19,7 @@
         "eslint": "^8.7.0",
         "eslint-config-prettier": "^8.3.0",
         "jest": "^27.4.7",
-        "prettier": "^2.5.1",
+        "prettier": "^2.6.0",
         "rimraf": "^3.0.2"
       }
     },
@@ -12451,15 +12451,18 @@
       }
     },
     "node_modules/prettier": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.5.1.tgz",
-      "integrity": "sha512-vBZcPRUR5MZJwoyi3ZoyQlc1rXeEck8KgeC9AwwOn+exuxLxq5toTRDTSaVrXHxelDMHy9zlicw8u66yxoSUFg==",
+      "version": "2.6.0",
+      "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.6.0.tgz",
+      "integrity": "sha512-m2FgJibYrBGGgQXNzfd0PuDGShJgRavjUoRCw1mZERIWVSXF0iLzLm+aOqTAbLnC3n6JzUhAA8uZnFVghHJ86A==",
       "dev": true,
       "bin": {
         "prettier": "bin-prettier.js"
       },
       "engines": {
         "node": ">=10.13.0"
+      },
+      "funding": {
+        "url": "https://github.com/prettier/prettier?sponsor=1"
       }
     },
     "node_modules/pretty-format": {
@@ -23571,9 +23574,9 @@
       "integrity": "sha1-gV7R9uvGWSb4ZbMQwHE7yzMVzks="
     },
     "prettier": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.5.1.tgz",
-      "integrity": "sha512-vBZcPRUR5MZJwoyi3ZoyQlc1rXeEck8KgeC9AwwOn+exuxLxq5toTRDTSaVrXHxelDMHy9zlicw8u66yxoSUFg==",
+      "version": "2.6.0",
+      "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.6.0.tgz",
+      "integrity": "sha512-m2FgJibYrBGGgQXNzfd0PuDGShJgRavjUoRCw1mZERIWVSXF0iLzLm+aOqTAbLnC3n6JzUhAA8uZnFVghHJ86A==",
       "dev": true
     },
     "pretty-format": {

data/helpers/package.json

@@ -19,7 +19,7 @@
     "eslint": "^8.7.0",
     "eslint-config-prettier": "^8.3.0",
     "jest": "^27.4.7",
-    "prettier": "^2.5.1",
+    "prettier": "^2.6.0",
     "rimraf": "^3.0.2"
   }
 }

data/lib/dependabot/npm_and_yarn/file_fetcher.rb

@@ -123,7 +123,7 @@ module Dependabot
           filename = path
           # NPM/Yarn support loading path dependencies from tarballs:
           # https://docs.npmjs.com/cli/pack.html
-          filename = File.join(filename, "package.json") unless filename.end_with?(".tgz", ".tar")
+          filename = File.join(filename, "package.json") unless filename.end_with?(".tgz", ".tar", ".tar.gz")
           cleaned_name = Pathname.new(filename).cleanpath.to_path
           next if fetched_files.map(&:name).include?(cleaned_name)
 
@@ -132,7 +132,7 @@ module Dependabot
             package_json_files << file
           rescue Dependabot::DependencyFileNotFound
             # Unfetchable tarballs should not be re-fetched as a package
-            unfetchable_deps << [name, path] unless path.end_with?(".tgz", ".tar")
+            unfetchable_deps << [name, path] unless path.end_with?(".tgz", ".tar", ".tar.gz")
           end
         end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.180.0
+  version: 0.180.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-03-18 00:00:00.000000000 Z
+date: 2022-03-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.180.0
+        version: 0.180.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.180.0
+        version: 0.180.1
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.23.0
+        version: 1.26.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.23.0
+        version: 1.26.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement